SpringBoot登录、退出、获取用户信息的session处理方案

@PostMapping("/user/login")
	public ResponseVo<User> login(@Valid @RequestBody UserLoginForm userLoginForm,
								  HttpSession session) {
		ResponseVo<User> userResponseVo = userService.login(userLoginForm.getUsername(), userLoginForm.getPassword());
		//设置Session
		session.setAttribute(MallConst.CURRENT_USER, userResponseVo.getData());
		log.info("/login sessionId={}", session.getId());
		return userResponseVo;
	}

//session保存在内存里，改进版：token+redis
	@GetMapping("/user")
	public ResponseVo<User> userInfo(HttpSession session) {
		log.info("/user sessionId={}", session.getId());
		User user = (User) session.getAttribute(MallConst.CURRENT_USER);
		return ResponseVo.success(user);
	}

@PostMapping("/user/logout")
	public ResponseVo logout(HttpSession session) {
		log.info("/user/logout sessionId={}", session.getId());
		session.removeAttribute(MallConst.CURRENT_USER);
		return ResponseVo.success();
	}

  <p><span>下午好！</span><span style="color: #fff21b"> [[${session.loginUser}]]</span> , 欢迎你！</p>

  <li><a th:href="@{/logout}" href="login.html">退出系统</a></li>

package com.cc.springboot.controller;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.ResponseBody;
import org.thymeleaf.util.StringUtils;
import javax.servlet.http.HttpSession;
import java.util.Map;
@Controller
public class LoginController {
    @PostMapping("/login")
    public String login(HttpSession session, String username, String password, Map<String,Object>map){
//        判断用户名不为空，且密码为123
          if(!StringUtils.isEmpty(username) && "123".equals(password)){
              //登录成功
              //重定向 redirect: 可以重定向到任何一个请求中（包括其他项目），地址栏改变
//              return "main/index"; //在静态资源中查找文件
              session.setAttribute("loginUser",username);
              return "redirect:/main.html";
          }
//          登陆失败
           map.put("msg","用户名或密码错误");
          return "main/login";
    }
//    退出登录
    @GetMapping("/logout")
    public String logout(HttpSession session){
//       1.清空session中的用户信息
        session.removeAttribute("loginUser");
//       2.再将session进行注销
        session.invalidate();
//       3.返回登录页面   index.html之前的视图映射
        return "redirect:/index.html";
    }
}